网马两只[MD5: 87ABE1 760089]

显示全部楼层 · 发表于 2007-9-30 23:50:34

http://74.222.130.28/Images/Hide/smss.exe
http://74.222.130.28/Images/Hide/3.exe

显示全部楼层 · 发表于 2007-9-30 23:52:22

C:\ABC\样本.rar:\smss.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\3.exe - 特征码 'Generic.Onlinegames.3' 被发现

显示全部楼层 · 发表于 2007-9-30 23:53:46

不认识

显示全部楼层 · 发表于 2007-10-1 00:03:10

已隔离：病毒 Heur.Invader (修改) 文件　: G:\Temp\样本.rar/3.exe//PE_Patch.UPX

显示全部楼层 · 发表于 2007-10-1 00:06:54

smss.exe Trojan.Downexec!inf

显示全部楼层 · 发表于 2007-10-1 00:32:22

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 279
Paranoia Database - 6300
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\smss.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\3.exe - Suspicious of Trojan-PSW.Small.1

2 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-1 01:34:34

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\��.rar'
C:\Users\morgan\Documents\
  ��.rar
[0] Archive type: RAR
--> smss.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
      [WARNING] Infected files in archives cannot be repaired!
--> 3.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-1 02:35:38

TrustPort Antivirus On-Demand Scanner

   Status       Quarantined
   Target       G:\v\2.zip
                           Options
                                             , Requested action: Repair, Excluded extensions disabled,
                           Excluded objects disabled, Heuristics enabled, Sandbox enabled, Scan
                           archives

            Statistics       Details

                                                Files             Boot sectorsRegistry key

                           Scanned             4                      0                      0
                           Infected             2                      0                      0
                           Repaired             0                      0                      0
                           Renamed             0                      -                         -
                        Quarantined             1                      -                         -
                              Deleted             0                      -                      0

显示全部楼层 · 发表于 2007-10-1 05:02:46

smss.exe没反应

显示全部楼层 · 发表于 2007-10-1 06:32:54

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind ... inegames.3.AB82C986

[病毒样本] 网马两只[MD5: 87ABE1 760089]

本帖子中包含更多资源

本帖子中包含更多资源